backup

type Entry struct {
	Path       string    `json:"path"`
	Profile    string    `json:"profile"`
	Collection string    `json:"collection,omitempty"`
	Global     string    `json:"global,omitempty"`
	ID         string    `json:"id,omitempty"`
	Command    string    `json:"command"`
	Time       time.Time `json:"time"`
	Bytes      int64     `json:"bytes"`
}

type Filter struct {
	// Profile limits the walk to one profile's directory. Empty walks every
	// profile under the root.
	Profile    string
	Collection string
	Global     string
	ID         string
	Command    string
	// Since keeps entries at or after this instant; Before keeps entries
	// strictly before it. Zero means unbounded.
	Since  time.Time
	Before time.Time
}

type Record struct {
	// PayBackup is the format marker and version; always FormatVersion.
	PayBackup int `json:"pay_backup"`
	// Time is when the document was read, UTC.
	Time time.Time `json:"time"`
	// Profile and BaseURL say where the document lives. BaseURL is redacted
	// (§5.3) before it is written: it is echoed into every file.
	Profile string `json:"profile"`
	BaseURL string `json:"base_url"`
	// Exactly one of Collection and Global is set.
	Collection string `json:"collection,omitempty"`
	Global     string `json:"global,omitempty"`
	// ID is the document id exactly as the server returned it (a JSON number
	// stays a number). Absent for a global.
	ID any `json:"id,omitempty"`
	// Command is the write that was about to run ("update", "delete", …).
	Command string `json:"command"`
	// RequestID is the X-Request-Id of the read that captured Doc, so the
	// capture can be found in the server log.
	RequestID string `json:"request_id"`
	// Draft is true when Doc was read with draft=true (the collection has
	// drafts): Doc is then the newest version, which may be an unpublished
	// draft on top of a published document.
	Draft bool `json:"draft"`
	// Trash is true when Doc was read with trash=true.
	Trash bool `json:"trash,omitempty"`
	// Locale and FallbackLocale are the locale parameters the capture used,
	// which are the ones the write was about to use. A restore sends them
	// back so it writes the same locale it read.
	Locale         string `json:"locale,omitempty"`
	FallbackLocale string `json:"fallback_locale,omitempty"`
	// RedactedPaths lists the values §5.3 masked before the file was written
	// (an apiKey on a users document, anything named *token* or *secret*).
	// A restore never writes those paths back.
	RedactedPaths []string `json:"redacted_paths,omitempty"`
	// CLIVersion is the PayCLI build that wrote the file.
	CLIVersion string `json:"cli_version,omitempty"`
	// Doc is the document.
	Doc map[string]any `json:"doc"`
	// PublishedDoc is the document's main row — its live, published state —
	// captured only when it differs from Doc because a newer draft sits on
	// top of a published document (Doc's _status is "draft", the main row's
	// "published"). That published state is exactly what a non-draft write
	// (update without --draft, publish, apply, upsert, sync) overwrites, so a
	// restore writes it back first and then Doc as the draft on top.
	PublishedDoc map[string]any `json:"published_doc,omitempty"`
}

type Ref struct {
	Profile    string
	Collection string
	Global     string
	ID         string
}

type Store struct {
	// Root is the configured backup_dir (absolute). Profiles are
	// sub-directories of it.
	Root string
}